$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa File: 27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa (raw, json) Hash identifier: Zs+zjp8oR61Q/Ss7dJeWDRbIvHgkuP6e4OR+O+jVxgg= Subject key identifier: D7:1E:42:75:9C:5D:E9:F3:D0:2B:22:0E:43:F6:22:11:20:14:6E:7C Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F43285848D0ABC36432FA09AFEA5DB740 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 62467 IP address blocks: 104.167.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c3:64:32:fa:09:af:ea:5d:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=0a265629-0c68-49d8-ad29-1ad2b31d4bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:05:67:18:0a:08:93:88:7e:28:ea:a2:35: 15:bb:5c:ff:23:e1:6d:c4:01:b6:46:7a:b3:ab:2c: 11:5b:9e:ce:cb:74:28:98:42:10:b3:0d:4e:c0:d6: 8d:a2:5c:26:61:46:0d:24:1b:5f:fa:a5:35:0e:7c: 45:36:c4:19:0d:4b:8e:3e:26:20:fc:b8:76:36:a7: fc:b4:30:99:06:30:28:9a:09:47:67:2e:69:60:f6: 14:66:ed:49:f2:6b:95:9c:82:d1:30:33:bf:77:9e: 44:ce:2d:41:ef:0a:88:95:b5:ed:64:f2:ce:5e:01: c5:f2:ba:bf:c4:e0:68:41:72:bd:4f:6b:93:60:d8: aa:44:d0:b2:7a:d8:52:42:49:94:4d:30:9e:ec:cd: ff:51:1f:ea:82:34:35:d5:eb:23:14:aa:c7:d1:de: f7:ee:f8:15:0a:9d:8d:fd:ba:af:cb:b4:e1:21:14: f0:97:44:96:9d:93:0f:69:65:80:c6:6b:5c:d6:03: 00:5c:41:87:69:24:9f:bb:1a:75:a0:e4:a9:25:36: 72:e1:3a:bf:63:6f:1a:a5:c9:bf:d6:52:be:89:88: 70:9d:ab:66:f5:1e:8e:e8:a7:21:36:32:b2:57:c8: 97:d2:d7:2b:c2:43:f0:d8:1f:37:d5:22:2f:b9:fd: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1E:42:75:9C:5D:E9:F3:D0:2B:22:0E:43:F6:22:11:20:14:6E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4e:5e:0e:7b:07:2c:f3:85:22:31:45:cb:a9:e4:c9:49:ba: 14:b7:0a:c6:fa:27:d8:92:62:49:62:a5:86:b2:a3:7d:64:f1: be:db:da:11:71:fc:20:b9:74:f9:f2:48:27:50:15:f1:b9:b6: 23:cc:f2:8d:80:8e:ec:17:9a:3e:34:6a:6b:14:32:48:6d:e8: 0d:84:6b:53:ba:a3:0f:a3:0d:19:fc:33:7c:95:6e:fc:5f:95: a1:64:16:49:10:98:33:ef:fd:2e:b7:bb:06:bc:21:cc:9d:0f: 41:d8:e8:10:c7:f7:b9:a7:e4:08:34:4f:66:fb:ed:a0:26:9f: 8f:e8:5b:59:ff:cc:92:28:65:0c:9c:c8:39:58:9b:ea:c7:a8: 6e:d9:c5:95:9a:46:b9:74:31:60:09:30:d0:e0:07:cb:20:bb: 39:6c:ef:c6:23:ae:26:7b:a1:98:53:dc:6c:e6:92:2f:fe:b6: 5d:28:5a:cb:3a:a1:cf:9d:b1:fe:d1:a1:93:b9:aa:de:da:ce: d9:e1:ef:2d:05:2e:a0:12:03:4a:8c:47:bb:79:3c:ed:d0:83: ec:37:db:8e:ab:65:82:f1:66:e2:c0:20:fb:f3:ff:36:09:e7: 1c:24:63:14:e4:ac:a2:6d:8b:8e:d9:b0:9c:d7:1e:34:f6:19: ad:54:fe:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8NkMvoJr+pdt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MGEyNjU2MjktMGM2OC00OWQ4LWFkMjktMWFkMmIzMWQ0YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3YFZxgKCJOIfijqojUVu1z/I+FtxAG2Rnqz qywRW57Oy3QomEIQsw1OwNaNolwmYUYNJBtf+qU1DnxFNsQZDUuOPiYg/Lh2Nqf8 tDCZBjAomglHZy5pYPYUZu1J8muVnILRMDO/d55Ezi1B7wqIlbXtZPLOXgHF8rq/ xOBoQXK9T2uTYNiqRNCyethSQkmUTTCe7M3/UR/qgjQ11esjFKrH0d737vgVCp2N /bqvy7ThIRTwl0SWnZMPaWWAxmtc1gMAXEGHaSSfuxp1oOSpJTZy4Tq/Y28apcm/ 1lK+iYhwnatm9R6O6KchNjKyV8iX0tcrwkPw2B831SIvuf07NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNceQnWcXenz0CsiDkP2IhEgFG58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvMjdmNzljNjYtYWRlMS0z NGQxLWI2OTgtNGNlNjgxM2RkZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVOXg57ByzzhSIxRcup5MlJuhS3Csb6J9iSYklipYayo31k8b7b2hFx /CC5dPnySCdQFfG5tiPM8o2AjuwXmj40amsUMkht6A2Ea1O6ow+jDRn8M3yVbvxf laFkFkkQmDPv/S63uwa8IcydD0HY6BDH97mn5Ag0T2b77aAmn4/oW1n/zJIoZQyc yDlYm+rHqG7ZxZWaRrl0MWAJMNDgB8sguzls78YjriZ7oZhT3Gzmki/+tl0oWss6 oc+dsf7RoZO5qt7aztnh7y0FLqASA0qMR7t5PO3Qg+w3246rZYLxZuLAIPvz/zYJ 5xwkYxTkrKJti47ZsJzXHjT2Ga1U/vY= -----END CERTIFICATE-----Generated at Mon Apr 28 16:17:39 2025 by rpki-client